{"id":413122,"date":"2021-09-08T15:27:59","date_gmt":"2021-09-08T13:27:59","guid":{"rendered":"https:\/\/mybroadband.co.za\/news\/?p=413122"},"modified":"2021-09-08T15:33:45","modified_gmt":"2021-09-08T13:33:45","slug":"microsoft-warns-of-office-security-flaw","status":"publish","type":"post","link":"https:\/\/mybroadband.co.za\/news\/security\/413122-microsoft-warns-of-office-security-flaw.html","title":{"rendered":"Microsoft warns of Office security flaw"},"content":{"rendered":"

Microsoft has warned<\/a><\/strong> users of a remote code execution vulnerability in MSHTML that malicious actors can exploit to infect a target’s computer.<\/p>\n

Hackers exploit this weakness by sending victims a Microsoft Office file that, once opened, directs the victim to the malicious actor\u2019s website, which features an ActiveX control that downloads malware to the computer.<\/p>\n

The vulnerability \u2014 CVE-2021-40444 \u2014 impacts Windows Server versions 2008 and onwards, as well as Windows 7 through Windows 10.<\/p>\n

\u201cAn attacker could craft a malicious ActiveX control to be used by a Microsoft Office document that hosts the browser rendering engine,\u201d Microsoft said.<\/p>\n

\u201cThe attacker would then have to convince the user to open the malicious document.\u201d<\/p>\n

\n

💥💥⚡️⚡️
\nEXPMON system detected a highly sophisticated #ZERO<\/a>-DAY ATTACK ITW targeting #Microsoft<\/a> #Office<\/a> users! At this moment, since there’s no patch, we strongly recommend that Office users be extremely cautious about Office files – DO NOT OPEN if not fully trust the source!<\/p>\n

\u2014 EXPMON (@EXPMON_) September 7, 2021<\/a><\/p><\/blockquote>\n